Is quick start supposed to launch every time you access Jellyfin from a new browser?

[JaggedJax]

I have this problem too. I had no idea my JellyFin server was wide open for anyone to setup admin access to! It is weird that this is allowed.

I already have my admin user setup and this issue started happening when I added additional users. Accessing the Jellyfin URL when not logged in was showing the setup wizard!

Disabling the "Hide this user from login screens" option for all users did not fix the issue for me. This must be a security bug, there's no way it should be letting anyone take over my server. It's like some internal "Server Setup" flag isn't properly set so the server is still trying to perform the Wizard again.


OS: Ubuntu Linux
Install method: Debian repo
Logs: Not showing anything other than video play content. Nothing login or app related at all.

Wizard shown when accessing Jellyfin from web browser while logged out (even though this is a fully setup server!)

Clicking Next shows an admin user setup screen!!!

But I am already an admin and have already setup a second user.